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Receive request from Windows client 
to read file security attributes 



Obtain file security attributes for the file 
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Generate SD and send SD to the Windows client 
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Translate UNIX file permissions into a set of Windows file permissions 



Remove any rights from the owner that the owner would be granted implicitly 

but are not granted to either the group or to everyone 



Determine any rights that need to be explicitly denied to the owner and to the group 



t Produce a set of access control elements and 
order the access control element hierarchically 





Analyze the access control elements to determine any redundant permissions 
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Remove any redundant permissions 
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Receive request from Windows client 
to modify file security attributes 





Generate a Windows owner SID from the UNIX owner ID 
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Generate a Windows group SID from the UNIX group ID 




Generate a set of Windows file permissions for the file 



Merge the desired changes with the set of Windows file permissions 
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Write the set of Windows file permissions to the file 
such that the file becomes a Windows-secured file 



